Classification-restricted spaces
A classification-restricted space applies program-level policy on top of global Classifier settings.
Configure in Space tools → Classifier → Configuration.
What changes
| Behavior | Normal space | Classification-restricted space |
|---|---|---|
| Selective macro viewing | Available (if global mode is selective) | Disabled — forced most-restrictive |
| Rollup source | All valid macros on page | Allowed list + default fallback |
| Access check | Mode-dependent | Space grantee AND classification group |
| Empty pages | Unclassified until author classifies | May receive default classification on first access |
The AND rule
Non-admin users need both:
- Membership in space View/Edit grantees, and
- Membership in the page's classification group
Missing either → no access.
Allowed classifications
Only markings on the allowed list count toward rollup. Others may be ignored or clamped to the space default on save.
Default classification
Sets the baseline for pages without a valid marking. Lazy backfill may apply default banner and permissions the first time a page is accessed.
When to use
- Mission or program spaces with a fixed classification baseline
- Environments where space membership alone is insufficient
When not to use
- General team wikis intended for selective collaboration
- Spaces where only some pages should be classified
Misconfigured restriction on a normal wiki makes every page feel locked down.
Setup checklist
- Define allowed list and default classification.
- Set space group prefix if needed.
- Create prefixed groups for default and allowed markings.
- Verify with a test page and non-admin user in/out of classification group.